← CVE Intelligence

CVE-2025-54289

Privilege Escalation via WebSocket Connection Hijacking in LXD Operations API PUBLISHED

Description (CNA)

Privilege Escalation in operations API in Canonical LXD <6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format

Affected (CNA)

Vendor / productVersions
Canonical / LXDaffected 6 before 6.5; affected 5.21 before 5.21.4

CWE

CWE-1385

References

ADP enrichment

CISA-ADP

No English description supplied.